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Abstract. We investigate stable operations in supersingular elliptic cohomology using isog- 
enies of supersingular elliptic curves over finite fields. Our main results provide a framework 
in which we give a conceptually simple proof of an elliptic cohomology version of the Morava 
change of rings theorem and also gives models for explicit stable operations in terms of isogenies 
and morphisms in certain enlarged isogeny categories. We relate our work to that of G. Robert 
■ on the Hecke algebra structure of the ring of supersingular modular forms 
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In previous work we investigated supersingular reductions of elliptic cohomology [1], stable 
operations and cooperations in elliptic cohomology O El [H] and in [TTl [TU] gave some ap- 
plications to the Adams spectral sequence based on elliptic (co)homology. In this paper we 
investigate stable operations in supersingular elliptic cohomology using isogenies of supersing- 
I ular elliptic curves over finite fields; this is similar in spirit to our earlier work [B] on isogenies 

of elliptic curves over the complex numbers although our present account is largely self con- 
tained. Indeed, the promised Part II of [6] is essentially subsumed into the present work together 
with [HI [TT| llOj . A major inspiration for this work lies in the paper of Robert [33], which also 
led to the related work of ItQj; we reformulate Robert's results on the Hecke algebra structure of 
the ring of supersingular modular forms in the language of the present paper. 
J> ' Throughout, p will be a prime which we will usually assume to be greater than 3, although 

^ ■ much of the algebraic theory works as well for the cases p = 2,3 provided appropriate ad- 

. justments are made. The precise implications for elliptic cohomology at the primes 2 and 3 

are considerably more delicate and related to work of Hopkins and Mahowald on the ring of 
CN topological modular forms. 

■ A very general discussion of useful background material from algebraic geometry can be found 
O ■ in [38]. 

Historical note. A version of this paper originally appeared around 1998, and grew out of a 
^ ' long period of work on elliptic cohomology in the 1980s sense of a Landweber exact cohomology 

■ theory based on level 1 modular forms with 6 inverted. As part of this project the author learned 
a lot about modular forms and their theory and tried to apply this to stable homotopy theory. 
The theory described here was an attempt at building a picture of the operations in supersingular 
elliptic cohomology based on work of Tate and others. We did not make use of the modern 
theory of structured ring spectra, so this lacks the spectrum-level rigidity that is now seen as 
crucial in the construction of the topological modular forms spectrum. Nevertheless, recent 
work of Behrens and Lawson [141 [TS] has touched on similar ideas but in a more sophisticated 
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fashion. We make this paper available on arXiv in part to provide a historical record of an 
earlier attempt at using some of these ideas. 



1. Elliptic curves over finite fields 

General references for this section are |22l [37] , while [251 [26] provide more abstract formu- 
lations. We will be interested in elliptic curves £ defined over a subfield k C Fp, the algebraic 
closure of Fp, indeed, we will take k = Fp unless otherwise specified. We will impose further 
structure by prescribing a sort of 'orientation' for a curve as part of the data. We will usually 
assume that p > 3, although most of the algebraic details have analogues for the primes 2 and 3. 

We adopt the viewpoint of \Zb\ 126] . defining an oriented elliptic curve to be a connected 
1-dimensional abelian group scheme £ over k equipped with a nowhere vanishing invariant 
holomorphic 1-form uj G Q}{£). We will refer to £ as the underlying elliptic curve of ^ = {£^uj). 

A morphism of abelian varieties (p : £\ — > £2 for which ip*ij02 7^ corresponds to a morphism 
ip: £1 — > £2- Since Q}{£i) is 1-dimensional over Fp, there is a unique Aj^ G k^ for which 
(^*ll'2 = XtpU^i- So such a morphism (p \s a, pair of the form ((^, A,^); if A^ = 1 we will say that 
(p is strict. We will denote the category of all such abstract oriented elliptic curves over k by 
AbsEUk, and AbsEU when k = Fp. 

If p > 3, by the theory of normal forms to be found in [221 [37], 139] . for the oriented elliptic 
curve £_ there are (non-unique) meromorphic functions X, Y with poles of orders 2 and 3 at 
O = [0, 1,0] and a non- vanishing 1-form dX/Y for which 

(1.1) y2 ^ 4^3 _aX -h for some a, 6 G k. 
The projectivization of the unique non-singular cubic 

(1.2) =4x^ -ax-b 

is a non-singular WeierstaraB cubic and there is an isomorphism of elliptic curves 

{e,Xe): {£,dX/Y) {£w,dx/y). 

By twisting, we can ensure that Xe = 1, i.e., 9 is strict. For each £_ we choose such a strict 
isomorphism 9^. Conversely, a WeierstraB cubic yields an abstract elliptic curve with the non- 
vanishing invariant 1-form dx/y. Let Ell denote the full subcategory of AbsEll consisting of 
such WeierstraB cubics £ equipped with their standard 1-forms, {£,dx/y). 

Theorem 1.1. The embedding Ell — > AbsEll is an equivalence of categories. 

Because of this, the phrase (oriented) elliptic curve will now refer to a WeierstraB cubic, since 
we can replace a general elliptic curve by a WeierstraB cubic up to isomorphism. 

A modular form / of weight n defined over k is a rule which assigns to each oriented elliptic 
curve £_= {£,uj) over k a section f{£_)io^'^ of the bundle {£)^'^, such that for each isomorphism 
ip: £1 — > £2, 

^*U{£2)u:T) = f{§lX- 

In particular, if p*L02 = Awi, then 

f{£2) = A-"/(^), 

which is formally equivalent to / being a modular form of weight n in the classical sense of [37j . 
If we rewrite Equation (|1.2|) in a form consistent with the notation of III §1], 

(1.3) f:,^ = 4x^-^x + ^, 
^ ' ^ 12 216 
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the functions C4,C6 are examples of such modular forms of weights 4 and 6 respectively. The 
non-vanishing discriminant function A defined by 

" 1728 

is also a modular form of weight 12. In fact the curve £ is defined over the finite subfield 
Fp(c4(^), cq{S_)) C Fp and hence over any finite subfield containing it. The j-invariant of £ is 

J© = ^eF,(c4(^),C6(^)). 

j is a modular form of weight and only depends on £, so we will write 

The next result is well known [22^ [37] ; note that further information is required to determine 
the isomorphism class over a finite field containing ^p{c4^{S_),cq{£_)). 

Theorem 1.2. The invariant is a complete isomorphism invariant of the curve £ over the 
algebraically closed field ¥p. 

Another important invariant is the Hasse invariant Hasse(^) which is a homogeneous polyno- 
mial of weight p — 1 in C4(^), cq{£) which have given weights 4 and 6 respectively. The oriented 
elliptic curve £_ = {£,uj) is said to be supersingular if Hasse(^) = 0; again this notion only 
depends on £ and not the 1-form uj. 

Given £ defined over k C Fp, we can consider £(k'), the set of points defined over an extension 
field k' 5 k. We usually regard £(¥p) as 'the' set of points of £; thus whenever k C k' C Fp, we 
have 

^(k) C £{k') C ,f (Fp). 

We will also use the notation 

£[n]=keT[n]£: £{¥p) ^ £{¥p), 

where [n]£ : £ — > £ is the multiplication by n morphism. Actually, this notation is potentially 
misleading when p \ n and should be restricted to the case p \ n. In Section HI we will also 
discuss the general case. 

For the elliptic curve £_ = {£,lu), if meromorphic functions X,Y are chosen as in Equation 
(jl.ip . there is a local parameter at O, namely —2X/Y, vanishing to order 1 at O. In terms of 
the corresponding WeierstraB form of Equation (jl.3p . this is the local parameter at O = [0, 1, 0] 
given by t£ = —2x/y. When referring to the elliptic curve £_, we will often use the notation 

{£,C4{£),CQ{£),t£) 

to indicate that it has Weierstrafi form as in Equation (II. Sp and local parameter t£. We refer 
to this data as a WeierstraB realization of the elliptic curve £_= {£,uj). 

The local parameter t£ has an associated formal group law F£ induced from the group 
structure map fi: £ x £ — > £ by taking its local expansion 

f,*t£=F£it'£,tl) 

where t'^,t'^ are the local functions on £ x £ induced from t£ by projection onto the two factors. 
Thus we have a formal group law F£(Z' , Z") £ k[[Z', Z"]] £ is defined over k. The coefficients 
of F£ lie in the Fp-algebra generated by the coefficients C4{£_),cq{£_) and the coefficient of Z'^Z'"^ 
is a linear combination of the monomials C4(^)*C6(f with 4z + 6j ' + 1 = r + s and whose 
coefficients are independent of £_); in particular, only odd degree terms in Z' , Z" occur. 

Given two elliptic curves £_ and £^ together with an isomorphism a: £ — > £' of abelian 
varieties, there is a new formal group law F^ defined by 

Fi{t'£,t'^) = a-'F£,{a%,,a%,). 



Lemma 1.3. Let £_ = {£,00) he an oriented elliptic curve and a: £ — > £ an automorphism of 
abelian varieties, then Fg = . 

Proof. The possible absolute automorphism groups are known from [22^ [37] to be given by the 
following list: 

• Z/6 if i(<f) = mod (p); 

• Z/4 ilj{£.) = 1728 mod (p); 

• Z/2 otherwise. 

In each case, provided that Fp2 C k, AuttiS = Autif^, the absolute automorphism group. The 
assertion follows by considering these possibilities in turn; for completeness we describe them 
in detail. 

When j{£) = 0, the Weierstrafi form is 

/^.^.^ 

and 

Fs{X,Y)= 

i+j=l mod (6) 

An automorphism of order 6 has the effect 

(x, y) ! — > (C|x, Cly) ; ts I — > 

where Ce is a chosen primitive 6-th root of unity in Fp. 
When j(£) = 1728, the Weierstrafi form is 

hence 

F£_{X,Y)= Yl a^,,X'YK 

i+j=l mod (4) 

An automorphism of order 4 has the effect 

{x, y) ! — > (C|x, C|y); te_ I — > Q^t£, 

where C4 is a chosen primitive 4th root of unity in Fp. 

Finally, in the last case, an automorphism of order 2 has the effect 

(x, y) ! — > {x, -y); tg 1 — > -tg. □ 
Given a WeierstraB realization £ of £_, defined over k, for u S k, the curve 

£-:y' = Ax'-^^^x + ^^-^ 
^ 12 216 

is the u-twist of £. For w E k with v'^ = u, there is a twisting isomorphism 6^ '■ £ — > £0 which 
is the completion of the affine map 

y^v- {x,y) > — > {v'^x,v^y). 
The effect of this on 1-forms is given by 

i I \ = V LU. 



V y 

Theorem 1.4. For each oriented elliptic curve £_ = {£,io) defined over k, there is a twisting 
isomorphism £_ — > £q, defined over k or a quadratic extension k' o/k, where £q = {£Q,dx/y) 
is a Weierstrafi elliptic curve of one of the following types: 
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If ji£)^0 mod (p), 

fo:y' =4x^-4; 

ifj{£) = 1728 mod {p), 

Sq: y"^ = 4x^ - 4x; 

if j {8)^ 0,1728 mod(p), 



j{£)- 1728 j{£)- 1728- 

Proof. The above forms are taken from Husemoller [22j. Given a Weierstrafi realization £ of 
it is easy to see that £ has the form £q for some u € k, where £o has one of the stated forms 
depending on j{£). Then there is a twisting isomorphism 9^: £ — > £q for ij G k satisfying 
= u. □ 

In each of the above cases, the isomorphism 9^: £ = £q \s defined using suitable choices of 
twisting parameter u. Although this is ambiguous by elements of the automorphism groups 
AutiS = AutiSo) we have the following consequence of Lemma 11.31 

Proposition 1.5. The formal group law Fg only depends on £_, and not on the isomorphism 
£ = £q, hence is an invariant of £_. 

When £ is super singular, we also have the following useful consequence of the well known 
fact that j{£) £ ¥p2, see [371 Chapter V Theorem 3.1]. 

Proposition 1.6. If£ is super singular, then the coefficients of F^g lie in the subfield¥p{j{£)) C 

2. Categories of isogenies over finite fields and their progeny 

For elliptic curves £i and £2 defined over a field k, an isogeny (defined over k) is a non- 
trivial morphism of abelian varieties (/?: £1 — > £2- A separable isogeny is an isogeny which is 
a separable morphism. This is equivalent to the requirement that ip*uj2 7^ 0, where uj2 is the 
non- vanishing invariant 1-form on £2- An isogeny ip is finite and the separable degree of ip is 
defined by 

degs</J = I kenp\. 

If ip is separable then degg ip = degip, the usual notion of degree. 

Associated to the oriented elliptic curve £_ over ¥p defined by Equation <\l.3\} . are the p^-th. 
power curve 

£(P') : y' = 4x3 - ^^Q^^'^x + ^cdQ^''^ 
and the 1/p^-th power curve 

12 216 

where for a G ¥p, a^^^^^^ G ¥p is the unique element satisfying 

Properties of these curves can be found in [37]. In particular, given an elliptic curve £_, there is 
a canonical choice of invariant 1-forms oj^'p'"^ and jyp"^ so that the assignments 

£ = {£,oj) ^ =^(p'), 

£ = {£,oj) - {£^^IP'\J^IP')) = ^(i/P^) 
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extend to functors on the category of isogenics; these powering operations on 1-forms can easily 
be seen in terms of Weierstrai3 forms where they take the canonical 1-form dx /y on 
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to dX/Y on each of the curves 



E^P") : = Ax' - ^^Q^^'^x + ^ce{£)^''\ 

12 21d 
Proposition 2.1. Each isogeny ip: E\ — > £2 has unique factorizations 

where the morphisms s^'- £\' ^ — > £2, Vs'- £1 — > £2^ '^'"^ separable and the morphisms 
denoted Fr are the evident iterated Frobenius morphisms Fr : £1 — > £^ , Fi : £2 — > £2- 

A special case of this is involved in the following. 

Proposition 2.2. For a supersingular curve elliptic curve £ defined over k, the iterated Frob- 
enius Fr^ : £ — > £^P ^ factors as 

where A is an isomorphism defined overk. In particular, if £ is defined over Fp2 then f(p') = £ 
and X £ Aut £. 

Now let £1 and £2 be defined over ¥p and let ip : £1 — > £2 be a separable isogeny; then there 
is a finite field k C Fp such that £1, £2 and ip are all defined over k. Later we will make use of 
this together with properties of zeta functions of elliptic curves over finite fields to determine 
when two curves over ¥p are isogenous. 

Associated to an isogeny ip: £\ — > £2 between two elliptic curves defined over k there is a 
dual isogeny (p : £2 — > £1 satisfying the identities 

lpop=[degip]£^, ipo(p=[degip]£2, 

where [n]^ denotes the multiplication by n morphism on the elliptic curve £. Localizing the 
category of separable isogenics of elliptic curves over finite fields by forcing every isogeny [n]£ 
to be invertible results in a groupoid since every other regular isogeny also becomes invertible. 
Using the theory of p-primary Tate modules, we will modify this construction to define a larger 
category which also captures significant p-primary information. 

Let £_ be an elliptic curve over Fp with a Weierstrafi form as in Equation (|1.3p with its 
associated local coordinate function t£_ = —2x/y and its formal group law F£_{X,Y). We say 
that an isogeny ip : £1 — > £2 is strict if 

y^*t£2_ = t£i_ mod {te^). 

This condition is equivalent to the requirement that ip*ijj2 = wi, hence a strict isogeny is 
separable. 

For a separable isogeny ip : £\ — > £2 there is a unique factorization of the form 
(2.1) ip: £\ ^ £\l\ei ip ^ £2 

where ip' is an isomorphism, and p is a strict isogeny. The quotient elliptic curve if^i/ker(/9 is 
characterized by this property and is constructed explicitly by Velu ^1], who also determines 
P**(£'i/ker 1/3,0;)) where a; is the 1-form induced by the quotient map. 



We will denote by Isog the category of elliptic curves over ¥p with isogenies ip: £i — > £2 
as its morphisms. Isog has the subcategory Seplsog whose morphisms are the separable 
isogenies. These categories have full subcategories Isoggg and Seplsoggg whose objects are the 
super singular curves. 

These categories can be localized to produce groupoids. This can be carried out using dual 
isogenies and twisting. For the Weierstrafi cubic £■ defined by Equation (jl.3p . and a natural 
number n prime to the factorization of [n]g given by Equation (|2.ip has the form 



.2 



where 
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is the twist of £ hy "n? G Fp^ and [n] is the map given by 

If we invert all such isogenies [n]^, then as an isogeny ip: £\ — > £2 is a morphism of abelian 
varieties, 

° Hs, = [n]£2 ° f, 

hence inherits an inverse 

The resulting localized category of isogenies will be denoted Isog^ and the evident localized 
supersingular category Isog^. We can also consider the subcategories of separable morphisms, 
and localize these by inverting the separable isogenies [njs, i.e., those for which p \ n. The 
resulting categories Seplsog^ and Seplsog,^ are all full subcategories of Isog^ and Isog^. 

Given £i_ = (iSi,u;i), £2 = (£2,102), we extend the action of a separable isogeny ip: £1 — > £2 
to the morphism 

i£ = {ip,ip*~^): £1 > £2. 

So if ip*uj2 = Aw, 

^(x,u;i) = ((/5(x), \^^uj2). 
We will often just write tp for ip when no ambiguity is likely to result. Using this construction, 
we define modified versions of the above isogeny categories as follows. Seplsog is the category 
whose objects are the oriented elliptic curves over Fp and with morphisms 

(V7,A"V*"^): {^1,^1) — ' {£2,^2), 

where ip: £1 — > £2 is a separable isogeny and A G Fp^. Thus Seplsog is generated by 
morphisms of the form ip together with the 'twisting' morphisms A: {£,uj) — > {£t^) given by 
A = (Id^, A^^) which commute with all other morphisms. We can localize this category to form 
Seplsog^ with morphisms obtained in an obvious fashion from those of Seplsog^ together 
with the A. There are also evident full subcategories Seplsog^g and Seplsogj^ whose objects 
involve only supersingular elliptic curves. 

We end this section with a discussion of two further pieces of structure possessed by our 
isogeny categories, both being actions by automorphisms of these categories. First observe there 
is an action of the group of units Fp^ (or more accurately, the multiplicative group scheme Gm) 
on Isog and its subcategories described above, given by 

X- {£,(,:) = {£^\\oj), X-ip = ip^\ 

— X \ 2 

where A G Fp , ip: {£i,lji) — > {£2,^2) is an isogeny and ip is the evident composite 
99^': {£^'\X-^UJi) {£i,i^i) ^ {£2,i^2) (f2',Aw2). 
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The second action is induced by the Frobenius morphisms Fr'^ and their inverses. Namely, 
where for an isogeny ip: {£i,uji) — > {£2,uj2), (f^^''^ is the composite 

^ ■ [^l ) ^ [Ol,i0l) [C2,UJ2) > (,^2 '^^2 )■ 

If ip{x,y) = {ipi{x,y),ip2(x,y)), then 

Similar considerations apply to the inverse Frobenius morphism Fr~'^. 

3. Recollections on elliptic cohomology 

A general reference on elliptic cohomology is provided by the foundational paper of Landwe- 
ber, Ravenel &: Stong [29], while aspects of the level 1 theory which we use can be found in 
Landweber [28] as well as our earlier papers [SI HIE]. 

Let p > 3 be a prime. We will denote by Eii^ the graded ring of modular forms for SL2(Z), 
meromorphic at infinity and with (^-expansion coefficients lying in the ring of p-local integers 
Z(-p). Here Eli2n consists of the modular forms of weight n. We have 

Theorem 3.1. As a graded ring, 

EU,=Z^p^[Q,R,A-\ 
where Q £ EUs, R e £^^^12 and A = {Q^ - i?2)/1728 E £^^^24 have the q-expanstons 

Q{q) =i^4 = l + 240^(73(r)g^ 



R{q) = 1 - 504^ as (r)g^ 
A(g) =qj{{l-q^) 



\24 



The element A = Ep^i G EU2{p-i) is particularly important for our present work. Using the 
standard notation Bn for the n-th Bernoulli number we have 

2{p-l) 



A{q) = 1 - ^—i ^ap_2(r)g- ^ 1 mod (p). 



p-l 



l<r 



We also have B = -Ep+i G -E'^^2(p+i) with g-expansion 

Finally, we recall that there is a canonical formal group law Feu{X, Y) defined over EU^, whose 
p-series satisfies 

2 

\p\fei,i{X) = pX + • • • + uiX^ + • • • + U2XP + (higher order terms) 

2 

= uiX^ + • • • + U2XP + (higher order terms) mod {p) 

2 

(3.1) = U2XP + (higher order terms) mod(p, -ui). 

Combining results of 128^ [9], we obtain the following in which ( — ) is the Legendre symbol. 

\P J 
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Theorem 3.2. The sequence p, A, B is regular in the ring Ei£^, in which the following congru- 
ences are satisfied: 

ui = A mod (p); 



U2 



/ 



p 

With the aid of this Theorem together with Landweber's Exact Functor Theorem, in both 
its original form [27] and its generahzation due to Yagita [35], we can define elliptic cohomology 
and its supersingular reduction by 

EU*( ) = EU* BP*( ) 

BP* 

''EU*( ) = {EU/{p,A)y{ ) ^ EU*/[p,A) P(2)*( ), 

P(2)* 

where as usual, for any graded group M* we set M" = M_„. The structure of the coefficient 
ring ^^EU.;f was described in [3j and depends on the factorization of A mod {p). In fact, ^^E£i^ 
is a product of 'graded fields' and the forms of the simple factors of A mod (p) are related to 
the possible j-invariants of supersingular elliptic curves over ¥p. 

Using the definition of supersingular elliptic curves as pairs {£, uj), an element / G ^^Eii2n can 
be viewed as a family of sections of bundles Q^{£)'^" assigning to {£, tv) the section f{£, u;)u;®". 
An isomorphism ip: £\ — > £2 for which ip*ijJ2 = Awi also satisfies 

^*f{£2,u;2)cvr = fi£i,oj,)ojr 

and so 

ip*f{£2,i^2) = X-''f{£l,u;i). 

This is formally equivalent to / being a modular form of weight n in the traditional sense. 

The ring Eii^/{p) is universal for Weierstrafi elliptic curves defined over Fp while ^^EU^ is 
universal for those which are supersingular, in the sense of the following result. 

Proposition 3.3. The projectivization £ of the cubic 

= Ax^ — ax — b 

defined overFp is an elliptic curve if and only if there is a ring homomorphisms 9: E££^,/{p) — > 
Fp for which 

e{Q) = 12a, 9{R) = -2166. 
For such an elliptic curve, £ is supersingular if and only if 9 (A) = 0. 

The first part amounts to the well known fact that the discriminant of £ is A.[£) = — 276^, 
whose non- vanishing is equivalent to the nonsingularity of £. The second part of this result 
is equivalent to the statement that 9{A) = Hasse(^), a result which can be found in |22|, [37] 
together with further equivalent conditions. 

Next we discuss some cooperation algebras. In [6], we gave a description of the cooperation 
algebra = EM^EU as a ring of functions on the category of isogenies of elliptic curves defined 
over C. We will be interested in the supersingular cooperation algebra 

sspo ^ ^^EU^EU = """"EU^ ® EU^EU ^ """"EUJEU). 

The ideal (p, A) < E££^, is invariant under the r|^-coaction on E££^, and hence '^'^F^ can be viewed 
as the quotient of by the ideal generated by the image of {p, A) in F^ under either the left 
or equivalently the right unit map E££^: — > T^. The pair {^^E££^,^^T^) therefore inherits the 
structure of a Hopf algebroid over Fp. 
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The Hopf algebroid structure on {^'^E£i^,'^'^T^) implies that 

Spec^/TO = Alg^rrO,Fp) 

is a groupoid, or at least this is so if the grading is ignored. By the discussion of Devinatz fl8\ 
section 1] (see also our Section [7]), the grading is equivalent to an action of Gm which here is 
derived from the twisting action discussed in Section [TJ Let '^'^SEllFGL denote the category of 
supersingular elliptic curves over Fp with the morphism set 

'''SE11FGL(^,^) = {/: — > : / is a strict isomorphism}. 

There is an action of Gm on this extending the twisting action on curves, and also an action of 
the Galois group Gal(Fp/Fp). These actions are compatible with the composition and inversion 
maps. '^'^SEUFGL is also a 'formal scheme' in the sense used by Devinatz |18] . thus it can be 
viewed as a pro-scheme and we can consider continuous functions '^^SEllFGL — > Fp where the 
codomain has the discrete topology. 

Theorem 3.4. There is a natural isomorphism of groupoids with GYa-action, 

Specp^ Fp ^ ''"SEllFGL. 

Moreover, ¥p0^^T2n can be identified with the set of all continuous functions ^'^SEUFGL — > Fp 
of weight n and ^^^2n — ^p^^^^2n can he identified with the subset of Galois invariant functions. 

The proof is straightforward, given the existence of identification of Ell^EU as 

EU^EU = EU^ MU^MU (g> EU^, 

MU* MU, 

and the universality of MU^MU for strict isomorphisms of formal group laws due to Quillen 
[U [32]. We will require a modified version of his result. 
Recall from [U [32] that 

MU^MU = MU^bk -.k^l] 
with the convention that = 1, and that the coaction is determined by the formula 

This coaction corresponds to composition of power series with leading term T. We can also 
form the algebras MUtf\u,u~^] and MC/^.[u, [6o, ^fc : /c ^ 1] in which \u\ = |6o| = and 
there is a coaction corresponding to composition of power series with invertible leading term. 

This also defines a Hopf algebroid {MUt,[u,u^^\, MU^[u,u^'^][bQ,hQ^ ,hk : k ^ 1]) whose right 
unit is given by 

where x £ MU2d and is the image of x under the usual right unit MU^ — > MU^MU . 

There is a ring epimorphism Af[/*[u, u^^] [6o, ^0 ^, : A; ^ 1] — > MU^^MU under which u, 6o ' — > 
1 and which induces a morphism of Hopf algebroids 

{MU4u,u'^],MU4bo,b^\bk -.k^l])^ {MU^,MUMU). 

We can form a Hopf algebroid (£'^£*[u, u^^], F*) by setting 

T^ = Eii^[u,u-^] MU4u,u^^][bo,bQ\bk:k^l] EU^u^u-^] 
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and there is an induced morphism of Hopf algebroids 

Similarly, we can define Hopf algebroid {^^E££^[u,u^^],^^T^) with 

Now let '^'^EUFGL denote the category whose objects are the supersingular oriented elliptic 
curves over Fp with morphisms being the isomorphisms of their formal group laws; this cat- 
egory is a topological groupoid with Gm-action, containing '^'^SEUFGL. Using the canonical 
Weierstrafi realizations of Theorem 11.41 we have the following result. 

Theorem 3.5. There is a natural isomorphism of groupoids with Gm-action, 

Specp^ Fp "T, ^ '^'^EUFGL. 

Moreover, ¥p(B)^^T2n can be identified with the set of all continuous functions '^'^EUFGL — > Fp 
of weight n and ^^T2n ^ Fp(8>'^*^r2n can be identified with the subset of Galois invariant functions. 

Later we will give a different interpretation of ^^T^ in terms of the supersingular category of 
isogenies. 

4. Tate modules 

In this section we discuss Tate modules of elliptic curves over finite fields. While the definition 
and properties of the Tate module T^S for primes i ^ p can be found for example in [22\ I37j. we 
require the details for £ = p. Suitable references are provided by [lU \^ [THl [20] • Actually, it is 
surprisingly difficult to locate full details of this material for abelian varieties in the literature, 
which seems to have originally appeared in unpublished papers of Tate et al. 

In this section k will be a perfect field of characteristic p > and W(Ik) its ring of Witt 
vectors, endowed with its usual structure of a local ring (if k is finite it is actually a complete 
discrete valuation ring). The absolute Frobenius automorphism x i — > on k lifts uniquely to 
an automorphism a: W(k) — > W(k) and we will often use the notation x^^-* = cr(x) for this. 
Let Ok be the Dieudonne algebra 

Dk = W(k) (F,V), 

i.e., the non-commutative W(k)-algebra generated by the elements F and V subject to the 
relations 

FV = VF = p, Fa = a^P^F, aV = Va^P) , 
for a G W(k). Let ModpJ^' be the category of finite length Dt-modules and CommGpSchtlj)] 
be the category of finite commutative group schemes over k with rank of the form p'^. 

Theorem 4.1. There is an anti- equivalence of categories 

CommGpScht[p] < — > Mod[j,[ 
G ^M(G). 

Moreover, if rankG = p^ , then M(G) has length s as a W{k)-module. 

This result can be extended to DivGpuj, the category of p-divisible groups over k. 
Theorem 4.2. There is an anti- equivalence of categories 

DivGpk ^ Moclfji- 
G ^ M{G). 

Moreover, if rankG = p^ , M(G) is a free W{k)-module of rank s. 
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A p-divisible group G of rank is a collection of finite group schemes Gn {n ^ 0) with 
rank G„ = p^^ and exact sequences of abelian group schemes 

— > Gn ^ Gn+i — > Gi — > 
for n ^ 0. The extension of the result to such groups is accomplished by setting 

M(G) = limM(G„) 

n 

where the limit is taken over the inverse system of maps M(j„): M(G„+i) — > M(G„). The 
main types of examples we will be concerned with here are the following. 

If is a 1-dimensional formal group law over k of height h, then the p"-series of F has the 
form 

(4.1) ¥"]f{X) = nX^"" mod (X^^'+i) 

where n E k^. We have an associated p-divisible group ker[p°°]i7' of rank p^ with 
(kerb-]p)„ = ker[p"]^ = Spec(k[[X]]/(b"]F(X))). 
Let iS be a supersingular elliptic curve defined over k. The family of finite group schemes 

= kerb"]^ (n^O) 

constitute a p-divisible group £[p°°\ of rank p^ . In particular, if is the formal group law 
associated to the local parameter associated with a Weierstraf5 equation for we have 

Lemma 4.3. If £ is a supersingular elliptic curve defined over^, there is a compatible family 
of isomorphisms of group schemes over k, 

and hence there is an isomorphism of divisible groups 

£:[p-]-ker[p-]^,. 

Proof. This is essentially proved in Silverman j371 Chapter VII Proposition 2.2]; see also Katz 
& Mazur p6i Theorem 2.3.2]. If £ is given by a Weierstrai^ Equation (|1.3p . then in terms of the 
local parameter t = —x/y, y can be expressed in the form y = —l/w{t) for some power series 
w{t) G k[[t]] satisfying 

w{t) = t^ mod {t^). 

By Equation ()4.ip . the assignment 
extends to a k-algebra homomorphism 

mvmFM) mm/it"") 

where h is the height of F^, known to be 1 when 8 is an ordinary curve or 2 when it is 
supersingular. This induces a homomorphism of k-schemes 

f(k[[t]]/(tP"'^)[p"]-ker[p"]^, 

and Silverman's argument applied to the complete local ring R = k[[t]]/(t^"'') shows this to be 
an isomorphism. 

An alternative approach to proving this makes use of the Serre-Tate theory described in 
Katz [24', Theorem 1.2.1], together with Silverman [371 Chapter VII Proposition 2.2]. □ 
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We can now define the Tate module of the supersingular elhptic curve £ to be 

Tp£ = M{£[p^]) ^ M(ker[p°°]^,). 

Proposition 4.4. The Tate module Tp£ is a free topological W{k)-module of rank 2. 

In its strongest form, the following result from [42j is due to J. Tate, although never formally 
published by him; weaker variants were established earlier by Weil and others; a proof appears 
in [13]. 

Theorem 4.5. Let £ and £' he elliptic curves overYpd. Then the natural map 

Homp^^ {£, £') — > HomDp ^ {Tp£' , Tp£) 

is injective and the induced map 

HomF ^{£,£')®'Lp — > HomiBF {%£' , Tp£) 

is an isomorphism. 

Since Hom^ ^{£,£') is a free abelian group of finite rank, Homf ^{£,£') ® Zp agrees with its 
p-adic completion Hom^ ^{£,£')p . This finiteness also implies that for sufficiently large d, 

HoniF^d {£,£')= Homp^ {£,£')■ 

So interpreting ¥poo as ¥p, Theorem 14.51 also holds in that case. 

The above definition of Tp£ is different in essence from that of the Tate modules 

Te£ = lim£[r] 

n 

for primes i ^ p. However, for any k-algebra S, we may follow Fontaine p!9i Chapitre V] and 
consider 

T;£iS) = Homz,(Qp/Zp,f 
In his notation and terminology, Fontaine shows that the functor Tp£ satisfies 

T;£iS) = HomS';*(Qp/Zp <S> Tp£[p'^]{S), CWk(5)). 

From this it can be deduced that the case i = p oi the following result holds, the case where 
e^p being dealt with in [371122] . 

Theorem 4.6. Let £ and £' be elliptic curves over ¥pd and for a prime I let 

{\\m£[t] ifi^p, 
T^£ = s " 

[t;£ tfi = p. 

Then the natural map 

Homp^^ {£ , £') — > HomQ^i(^^/p^^) (T/<S , T/<S') 
is injective and the induced map 

^omv^^{£,£')0Zi — ' Hom(.^i(p^/p^^)(T/f,T/f') 

is an isomorphism. 

If is a supersingular elliptic curve defined over ¥p, its absolute endomorphism ring Endf = 
Endp £ is a maximal order in a quaternion division algebra over Q. On passing to the p-adic 
completion of E,nd£, we obtain a non-commutative W(Fp2)-algebra of rank 2, 

Os = End£^Zp. 
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Proposition 4.7. The division algebra Endf f^Q is unramified except at p and oo. 

If £ is defined over ¥pd, then as a W{¥p2)-algebra, the p-adic completion Os is given by 

Of =W(Fp2)(Fr('^)), 

where Fr^'^^ is the relative Frobenius map Fr^'^^ : £ — > ^(p'*) which satisfies the relations 

= up'^ with u a unit in W(Fp2), 

PrW a = a(P'') FrW for all a eW{¥p2). 

When d = 1, = W(Fp2)(S) is also isomorphic to the W{¥p2)- algebra O^^^ ^^^^ ^ corre- 
sponding to the Frobenius element F and agreeing with Fr up to a unit in W(Fp2). 

Proof See ^ Chapters 2 & 4]. □ 

Notice that Os has a natural p-adic topology extending that of Zp. Moreover, every element 
a £ Os has a unique Teichmiiller expansion 

(4.2) a = aQ + aiS (qq G W(Fp2), a(J^ = oo). 

As consequence of Proposition 221 the formal group law F^, becomes a formal W{¥p2)-module 
as defined in Hazewinkel [20] . We set 

EndF£=Endf^F£. 

Proposition 4.8. The natural homomorphism EndiS — > EndFf extends to an isomorphism 
ofW{¥p2)-algebras Oe — > EndF^. 

Proof. The extension to a map on the p-adic completion is straightforward, and the fact that 
the resulting map is an isomorphism uses Lemma 14.31 together with Tate's Theorem 14.51 see 
also Katz [23l §IV]. □ 

Corollary 4.9. Tp£ is a module over the Zp-algebra (W(Fp) (8) W(F„2)) (S) in which 

Proof. Elements of W(Fp2) C EndiS induce morphisms of Tp£. By definition of the Frobenius 
operation F in |17l Chapter III §5], we obtain the stated intertwining formula. □ 

Using Corollary 14.91 we can deduce more on the structure of Tp£. Let F = Gal(Fp/Fp) = Z 
and H = Gal(Fp/Fp2), hence F/H = Z/2. By [19, Chapitre III Proposition 2.1] extended in the 
obvious way to the infinite dimensional situation, the multiplication map 

W(Fp) ® {Tp£)^^TpS 

W{¥^2) 

is an isomorphism of W(Fp)-modules. Indeed it is an isomorphism of (topological) left F- 
modules and indeed of W(Fp) Cgi W(F„2)-modules. Moreover, viewed as a module over the right 

hand factor of 

W(Fp2) ^ 1 W(Fp2) C W(Fp) (g) W(Fp2) 

it is free of rank 2. We can now deduce from this that for any pair of supersingular elliptic 
curves £,£', Homoj. {Tp£',Tp£) is a free module of rank 1 over W(Fp2) (S), hence it is a free 

pd 

module of rank 2 over W(Fp2). 

14 



The ring W(Fp2) (S) is familiar to topologists as the absolute endomorphism ring of the 
universal Lubin-Tate formal group law height 2, agreeing with that of the natural orientation 
in Morava i^(2)-theory. Its group of units is 

§2 = {ao + aiS e W(Fp2) (S) : uq, ai £ W(Fp2), uq ^ mod (p)}, 

while 

§0 = {ao + aiS G W(Fp2) (S) : ao,ai e W(Fp2), ao = 1 mod (p)} 

is its group of strict units, known to topologists as the Morava stabilizer group. Let B2 be 
the rationalization of W(Fp2) (S) which is a 4-dimensional central division algebra over Qp. 
Adopting notation of [8], we will also introduce the following closed subgroup of the group of 
units §2 = : 

Notice also that 

Then §2 and §2 <iS2i ^-S-) these are closed normal subgroups. 
We can rationalize the Tate module Tp£, to give 

Vp£ = Qp ® Tp£, 

which is a 2-dimensional vector space over the fraction field B(lk) = Qp ® W(Ik). In fact, Vp£ is 
a module over the rationalization Bk = Qp ® Dfc. We can generalize Tate's Theorem to give the 
following, which we only state for curves defined over Fp. 

Theorem 4.10. Let £1 and £2 he elliptic curves over Fp. Then the natural map 

Isog>< (fi, £2) HomB-^ (Vpf2, Vp^i) 

is infective and has image contained in InvtHoms- (Vp£'2, VpiSi), the open subset of invertible 
homomorphisms, and the induced map 

Isog {£1, £2)p — > InvtHomB-^ ( Vp£:2 , Vp£i ) 

is a homeomorphism. 
The natural map 

Seplsog"" {£1, £2) — > HomiDj,^ {Tp£2,Tp£i) 

is infective with image contained in the open set of invertible homomorphisms and the induced 
map 

Seplsog^ {£1, £2)p — > InvtHomiD,-^ iTp£2, Tp£i) 

is a homeomorphism. 

Similar results hold for the supersingular isogeny categories. 

Every separable isogeny induces an isomorphism of Tate modules, therefore the image of 
SepIsog(<Si, <S2) in Homp- (Tp£2,Tp£i) is a dense subset of InvtHomp- (Tp£2,Tp£i). 

Notice also that a G InvtHomjD^ (Tp£,Tp£) with a = oq + ctiS as in Equation (14.21) . has the 
well defined effect a*ijO = aouj on 1-forms, since this is certainly true for elements of the dense 
subgroup End C InvtHomp- {Tp£,Tp£). 
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5. Thickening the isogeny categories 



Theorem 14. 101 leads us to define the following 'thickenings' of our isogeny categories. Starting 
with the category Isog and its subcategories, we enlarge each to a subcategory of Isog, with 
the same objects but as the set of morphisms £i — > £2, 



Isog(£'i,.S2) = iiomo-^{Tp£2,'Tp£i) - {0}, 
Isog ^{£i,£2) = InvtHomB- ( Vp<?2 , Vp£i ) , 

Up 

Seplsog {£1 ,£2) = InvtHomuj,^ {Tp£2 , Tp£i ) , 

and similarly for the supersingular categories. 

We can make similar constructions for the categories whose objects are oriented elliptic curves, 
setting 

Seplsog {{£i,ll)i),{£2,uj2)) = InvtHomp-^ {Tp£2 , Tp£i ) , 
and if £±,£2 are supersingular, 

SepIsogg''g((£:i, wi), (£2,(^2)) = lnvt}iomo-^{Tp£2,Tp£i). 

These morphism sets all have a natural profinite topologies, and composition of morphisms 
is continuous. These categories are 'formal schemes' in the sense of Devinatz |l8j and Strick- 
land [38j and we will make use of this in Section[71 Their object sets have the form Specp^ ^^E£i^, 
while the morphism set of a pair of objects can be identified with the limit of the pro-system 
obtained by factoring out by the open neighbourhoods of the identity morphisms in the sets of 
homomorphisms between the associated Tate modules. For example, 

Isog(fi,.?2) = limHomp- {Tp£2,Tp£i/U), 

u ^ 

where the limit is taken over the basic neighbourhoods C7 of in Tp£\ which are just the finite 
index subgroups. We can describe representing algebras for some of these formal schemes. We 
will do this for the supersingular category Seplsog^. Recall Theorem | 



Theorem 5.1. There is an equivariant isomorphism of topological groupoids with G^-action, 

Spec^.^ Fp ® ^T* ^ Seplsog^^,. 

Moreover, Fp '^^r2n can he identified with the set of all continuous functions Seplsog^ — > Fp 
of weight n and ^^T2n ^ Fp(K)'''^r2n can be identified with the subset of Galois invariant functions. 

Proof. This follows from an argument similar to that of [2]; see also [7] for a similar generaliza- 
tion. The idea is to consider locally constant functions 

Sepl^g^,{{£i,L0i),{£2,uj2)) =W{¥p2) {S) ^¥p, 

where {£i,uJi), {£2,^2) are two elliptic curves. The space of all such functions is determined 
using the ideas of [2], and turns out to be spanned by monomials in generalized Teichmiiller 
functions relative to expansions in terms of powers of S. Up to powers of u, these Teichmiiller 
functions are the images under the natural map Eii^:Eii — > Fp ® '^'^r2ra of the elements Dr £ 
Eii^EU of P equation (9.8)]. □ 
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For later use we provide a useful example of such a Galois invariant continuous function on 
Seplsog^, namely 

(5.1) ind: Seplsogg^^ — > Wp] md{{£,uj) ^ {£\uj')) = degc/? mod (p), 

where degip mod {p) is calculated by choosing a separable isogeny ipQ-. {£,u>) — > {£',10') which 
approximates (p in Homn^ (Tp£',Tp£) in the sense that ip = ipo mod (S). Clearly ind is locally 
constant, hence continuous, as well as Galois invariant. Also, for a composable pair of morphisms 

(p,9, 

ind(v36l) = ind(99)ind(6'). 

Proposition 5.2. The function ind corresponds to a element o/^^Tq which is group-like under 
the coaction ip and antipode x ihe sense that 

V'(ind) = ind (8) ind, x(iiid) = ind~^ . 

6. Continuous cohomology of profinite groupoids 
The results of this section appeared in greater detail in [12] . 

Let ^ be a groupoid, i.e., a small category in which every morphism is invertible. The 
function Obj Q — > Mor ^ which sends each object to its identity morphism embeds Obj Q into 
Mor Q so we can view Q as consisting of the set of all its morphisms. We will use the notation 

3/GObj g 

Following Higgins [21] we define a subgroupoid of a groupoid Q to be normal if it satisfies 
the following conditions: 

A) ObjAA = ObjC?; 

B) for every morphism x y m. Q, 

fN{x,x)f^^ =N{x,x). 

We will write J\f <\Q if A^ is a normal subgroupoid of Q. When J\f <Q we can form the quotient 
groupoid QjM whose objects are equivalence classes of objects of Q under the relation ^ for 
which 

X ~ y <^=^ 3 2; y in AA, 

and whose morphisms are equivalence classes of morphisms under the relation 

/ / /' / , , □ V I 1 t ■ \r i- f' -f-i 

X y ^ X — > y <^=^ dx— >x,y— >y mA s.t. / = qjp . 

Whenever two classes contain composable elements, composition of equivalence classes can be 
defined by 

[y ^ z\[x^y] = [x^ z], 

which is well defined since for morphisms x ^ x', y y', y y', z z', 

{sgr~^){qfp~^) = sg{r~^q)fp'^ = {sh)gfp'^ 

where h = g{r~^q)g~^ is in M{z, z). There is a quotient functor Q — > QjM. 

We define a groupoid Q to be automorphism finite if for every x E Obj^, Q{x,x) is a finite 
group. We define a groupoid G to be (automorphism) profinite if it is the inverse limit of 
automorphism finite groupoids, 

g ^ lunQ/M. 
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Such a groupoid has a natural topology in which the basic open sets have the form 

Uix ^ y,M) = {x^y: gf-' G Miy,y)}, 

where / E Mor^ and Q/M is automorphism finite. 

A topological groupoid is a groupoid which is a topological space such that the partial com- 
position Q X Q — > Q, inverse function Q — > Q, domain and codomain functions Q — > Obj G 

Objg 

are all continuous, where Obj G has the subspace topology. A profinite groupoid in the above 
sense is a topological groupoid. 

/ 

A groupoid Q is connected if for every pair of objects x,y in Q there is a morphism x y. 
More generally, G is the disjoint union of its connected components which are the connected 
subgroupoids. 

In order to define the cohomology of profinite groupoids we first need to define suitable 
a notion of module, and we follow the ideas of Galois cohomology, accessibly described in 
Shatz [HB], with Weibel [H] providing a more general cohomological discussion. 

For a profinite groupoid Q, a proper Q -module (over a commutative unital ring k) is a functor 
M : Q — > Modfe in which for x,y £ Obj^, m £ M(x), f G Q{x,y), the set 

Stabg(m, /, y) = {ge G{x, y) : M{g)m = M{f)m] C g{x, y) 

is open. This generalizes the notion of proper module for a profinite group, for which stabilizers 
of points are of finite index. We will denote the category of all proper ^-modules over k by 
Modk^g, where the morphisms are natural transformations. 
We set 

M= Mix) 
xGObj g 

and view this as a discrete topological space. We define a section of M to be a function 
^> : Obj g — >M. such that 

^{x)eM{x) (xeObjg). 
We will denote the k-module of all sections by Sect(^;M). 

Proposition 6.1. Let Q he a profinite groupoid and k a commutative unital ring. 

a) Modfc^g is an ahelian category with structure inherited from that of Modt. 

b) Modfc^g has sufficiently many infectives. 

Proof. These are straightforward generalizations of the analogous results for profinite groups 
found in [36] ; further details appear in [12|. □ 

We will consider two functors Mod^^g — > Modt. The first is a sort of fixed point construc- 
tion 

( )^: M = {$ G Sect(^;M) : V/ G a, M(/)($(dom/)) = $(codom/)}. 

This functor is left exact, so it has right derived functors R"( )^ for n ^ which can be viewed 
as the continuous cohomology of ^, H"(^; ). 

For xo G Obj^, we define a kind of 'localization at xq\ 

obtained by restricting to M_{xq) and taking the fixed points under the action of the automor- 
phism group of xq. This is left exact and has right derived functors R"'( )xq which we will denote 
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Proposition 6.2. // the profinite groupoid Q is connected, then for any xq E Obj G, there is a 
natural equivalence of functors 

( )xo = ( 

Hence there are natural equivalences of functors 

KiQ; ) = HSo(a; ) (n^o). 

Proof. For the first part, we produce a k-isomorphism F: M ^ . For m G M^.^, define 
F{m) = ^rn by 

$„(x)=M(/)m (xGObje?) 

where we choose any / G ^(rEo,^;); this choice does not affect the outcome since for a second 
choice g £ Q{xo,x), f~^g G G(xo,xo) and therefore 

M{g)m = M{f)M{f-^g)m = M{f)m. 

This is easily verified to be an isomorphism. 

The second part follows using a standard result on (5- functors described in [44, chapter 2]. □ 

This result shows that the calculation of the continuous cohomology H*(^;M) of a proper 
module M reduces to continuous group cohomology. 

Theorem 6.3. If G is a connected profinite groupoid and M_ is a proper Q -module over'k, then 
for any xq G Obj Q, 

K{Q-,m = K{Q{xo,xo)-M{xo)). 

In the general case we have the following. 

Theorem 6.4. If Q is a profinite groupoid and M is a proper Q-module over k, then for each 
n ^ 0, 

KiG-.m - WK{G{xc,xc);M{xc))^ 

c 

where C ranges over the connected components of Q and xc is a chosen object of C. 

Remark 6.5. The familiar approach to proving results of this kind would require there to be 
a topological splitting of G as Obj^ xi Q{xo,xo). Indeed, in our application no such continuous 
splitting exists and we would need to pass to a quotient category to make use of such an 
argument. 

Remark 6.6. The fixed point functor ( )^ agrees with the limit over the category Q, hence the 
continuous cohomology functors H"(^; ) are the derived functors of the limit. This connects 
our work with recent results of Hopkins, Mahowald et al. on the spectra EO2 and TMF, the 
ring of topological modular forms. 

7. On the cohomology of topological Hopf algebroids 

The best reference for the following material is Devinatz [18] which contains the most thor- 
ough discussion we are aware of on the continuous cohomology of topological groupoid schemes 
of the type under consideration in this paper. We simply sketch the required details from [18^ 
§1], amending them slightly to suit our needs. An alternative perspective on the cohomology of 
categories is provided by Baues & Wirsching [13J . 

Let C be a groupoid, k a commutative unital ring. Then Mod| will denote the category of 
complete Hausdorff k-modules defined in |18^ Definition 1.1]. Similarly, Alg| will denote the 
category of complete commutative k-algebras. We will refer to morphisms in these two categories 
as continuous homomorphisms of complete modules or algebras. 
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A cogroupoid object in Alg^ is then a pair (A, T) of objects in Alg| together with the usual 
structure maps rfR^-qL^e^ilj^x foi' a Hopf algebroid over k except that in ah relevant diagrams 
the completed tensor product has to be used; such data (A, F, ry^, ry^, e, ^, x) will be referred 

k 

to as constituting a complete topological Hopf algebroid. Equivalently, C = Spec[ T is an (affine) 
formal groupoid scheme. 

We can also consider the category Comodp of complete (left) F-comodules with morphisms 
being comodule morphisms also lying in Mod|. For two objects M, in Comodp, we will 
denote the set of morphisms M — > N by Homr (M, N) . The functor 

Comodr — > Mod^; M -w Homr (A, M) 

is left exact and its right derived functors form a graded functor Extp(^, ). 

Given a continuous morphism of complete Hopf algebroids /: (^,r) — > {^,1^) and a T- 
comodule M, there is an induced map 

H*f: ExtJ(^,Af) — >Exts(S,/*M) 

where f*M = B®M has the S-comodule structure described in 1181 . 

A ^ 
Now recall from |18t definition 1.14] the notion of a natural equivalence r: / — > g between 

two continuous morphisms f,g: {A^T) — > {B,T,) of complete Hopf algebroids. In particular, 

such a T induces a continuous homomorphism of complete S-comodules r* : g*M — > f *M, 

which in turn induces a map 

H*t: Ext*j.{B,g*M) — > Ext^(S, /*M). 

We will require Devinatz's important Proposition 1.16. 

Proposition 7.1. Let r: / — > g be a natural equivalence between continuous morphisms 
f,g: r) — > (B, T,) of complete Hopf algebroids. Then for any continuous T-comodule M, 

H*{t*) o H*g = H*f: Extr(^,M) — > Ext^{B,f*M). 

Using Devinatz's notion of equivalence of two complete Hopf algebroids we can deduce 

Corollary 7.2. ///: {A,T) — > {B,T,) is an equivalence of complete Hopf algebroids, then 

H*f: Extr(^,M) — >Exts(S,/*M) 

is an isomorphism. 

All of the above can also be reworked with graded k-modules and k-algebras. As Devinatz 
observes, when T is concentrated in even degrees, this is equivalent to introducing actions of 
the multiplicative group scheme Gm which factor through the quotient scheme where 
/^d ^ Gm is subscheme of d-th roots of unity. This applies to the situations of interest to us 
and indeed locally the actions of Gm factor through Gm/ /^2n where may take some of the values 
n = 2,4,6. An alternative approach to this is to view a Z-graded module as a Z/2-graded 
view module with action of Gm, and we prefer this approach. We then define an element x in 
degree n to be of weight wtx = n/2; this means thcit whenever o. G C^m; 

{^wtx-^ if n even, 
-a"*^-ix if n odd. 

For a profinite groupoid Q and a commutative unital ring k with the discrete topology, the 
pair of k-algebras 

A = Map"(Obja,k), r = Map"(g,k) 
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form a complete topological Hopf algebroid {A, T) with obvious structure maps induced from Q. 
A proper ^-module M with each M_{x) finitely generated over k is equivalent to a topological 
F-comodule M, where 

M = Sect(g;M) 

is a left ^-module via 

(a • ^){x) = a(x)$(x), 

and the coproduct ijj : M — > F M is determined on an element m G M by an expression of 

A 

the form 

s 

where rus G M and G T so that for each pair of elements x,y £ Obj Q, 0s restricts to a locally 
constant function on Q{x,y). 

8. Connectivity of the category of supersingular isogenies 

In this section we will show that the category of isogenies of supersingular elliptic curves 
Isoggg is connected in the sense that there is a morphism between any given pair of objects. 

Theorem 8.1. Two elliptic curves £, £' defined over a finite field F^d are isogenous over F^d 
if and only if \£{¥pd)\ = \£'{¥pd)\. 

Proof See [22l Chapter 3 Theorem 8.4]. □ 

Theorem 8.2. An elliptic curve £ defined over a finite field Fpd satisfies 

• \£(¥pd)\ = l+p'^ifdis odd; 

• |£:(Fp2m)| = (1 ± p^f «/Endp^ £ = EndF^, £. 

Proof. The list of all possible orders of |(?(Fpd)| appears in [l2], while [M] gives a complete list 
of the actual groups <f (F^d) that can occur. □ 

Theorem 8.3. The isogeny categories Isoggg and Isoggg are connected. 

Proof. We will show that any two supersingular elliptic curves £, £' defined over Fp are isoge- 
nous. We may assume that £ and £' are both defined over some finite field and then by Theorems 
18.11 and 18.21 we need only show that they become isogenous over some larger finite field. We 
begin by enlarging the common field of definition to Fp2m for which 

Endjp^ £ = Endp^j^ £ , Endp^ £' = Endp^a^ £'. 

Thus |<f (Fp2m)| and |<5'(Fp2m)| both have the form (1 itp™')^. If these are equal then the curves 
are isogenous over Fp2m. Otherwise we may assume that 

\£i¥p2m)\ = 1 + +/™, \£'i¥p2m.)\ = 1 - 2p"^ + p^- . 

If the WeierstraB equation of £ is 

£: y"^ = 4x^ - ax - b, 
taking a quadratic non-residue u in Fp2m allows us to define a twisted curve by 

which becomes isomorphic to £ over Fp4m. If 

No = \{t e ¥p2m :4t^-at-b = 0}|, 

Ni = \{t G Fp2m : — at — 6 / is a quadratic residue} |, 
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then 



But as 



we find that 



1 + A^o + 2iVi = 1 + 2^"* + 



ix^ - u^ax - u^b = u^{4{u ^x)^-a{u ^x)-b), 

|£:"(Fp2™)| = l + No + 2(/'™ -No- Ni) 
= 1- No-2Ni + 2p2™ 
= l-2p"^+/™. 



Hence, 



|(S'(Fp2m)| = \£^(¥p2m] 



and so these are isogenous curves over Fp2m , implying that £' is isogenous to £ over Fp277i . 

We could have also used the fact = j{£) to obtain an isomorphism £^ = £ over Fp, but 

the argument given is more explicit about the field of definition of such an isomorphism. 

The connectivity of Isoggg now follows from Tate's Theorem 14.51 □ 

Corollary 8.4. The groupoids Isog^ and Isog^ are connected. 

The following deeper fact about supersingular curves over finite fields, which is a consequence 
of Theorem I A. 11 allows us to show the connectivity of Seplsog^. 

Theorem 8.5. For any prime p > 3, there is a supersingular elliptic curve £q defined over ¥p. 
If p > 11, this can be chosen to satisfy j{£) ^ 0, 1728 mod (p). 

Proposition 8.6. The separable isogeny categories Seplsog^ and Seplsog^ are connected as 
are the associated categories of isogenics of oriented elliptic curves Seplsog^ and Seplsog^. 

Proof. Choose a supersingular curve £q defined over Fp as in Theorem 18.51 For each supersing- 
ular curve £ defined over Fp there is an isogeny ip: £ — > £q. By Proposition 12. H there is a 
factorization 

where ips- £ — > ^o^^^ ^ is separable. But £q^^^'^ = £q since £q is defined over Fp, hence 
ips ■ £ — > £o is a separable isogeny connecting £ to £o. Thus Seplsogg^g is connected. 

Now Tate's Theorem 14.51 implies that Seplsog^ is connected. 

The results for Seplsog^ and Seplsog^ follow by twisting. □ 

These results have immediate implications for the cohomology of the groupoids Isog^ and 

Seplsog^, however, for our purposes with Seplsog^ we need to take the topological structure 
into account and consider an appropriate continuous cohomology. We will discuss this further 
in the following sections. 



9. Splittings of a quotient of the supersingular gategory of isogenies 

In this section we introduce some quotient categories of Seplsog^. The first is perhaps more 
'geometric', while the second is a 'p- typical' approximation. 
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Our first quotient category is C = Seplsog^/Aut, where Aut denotes the automorphism 
subgroupoid scheme of Seplsog^g which is defined by taking the collection of automorphism 
groups of all the objects of Seplsog^g, 

Aut = ]J Aut£:. 

Notice that the automorphism group of {S,ui) only depends on S and so we can safely write 

Aut 6 for this. The objects of C are the objects of Seplsog^, whereas the morphism sets are 
double cosets of the form 

C((fi,a;i),(f2,W2)) = Autf2\SepIsogi((fi,a;i),(f2,W2))/Autfi. 

If we denote the twisting automorphism corresponding to t G Aut £ C ¥p hy Tt'. £ — ^ £ , 
where 

'rt{x,y) = {t^x,t^y), 

then an element of C{{£i,loi), {£2,1^2)) is an equivalence class of morphisms in Seplsog^ of the 
form 

Tt o ip o Tg-1 (s G Aut(£^i), i G Aut(£^2))5 
for some fixed morphism ip: {£i,uji) — > {£2,002)- 

Our second quotient category is Cq = SepIsog^//Xp2_i, where Hp2_i denotes the etale sub- 
groupoid scheme of Seplsog^ generated by all twistings by elements in the kernel of the (p^ — l)- 
power map Gm — > Gm, whose points over Fp form the group 

/ip2_i(Fp) ={t GFp'' :tP'-i = l}. 
Notice that Aut is a subgroupoid scheme of /Xp2_]^. Objects of Cq are equivalence classes [£,00] 
of objects of Seplsog^, and the morphism set Co([^i, [£"2,^2]) is a double coset of the form 

/Xp2 _ 1 \SepIsogs''s ( , a;i ) , 2 , W2 ) ) //^p2 _ 1 

which is the equivalence class consisting of morphisms in Seplsog^ of the form 

Tt{x,y) = {t^x,t^y), 

and an element of C((£^i, a;i), (£^2, '^2)) is an equivalence class of morphisms in Seplsog^ of the 
form 

for some fixed morphism (p: {£i,loi) — ^ {£2,i^2)- 

The set of objects in Cq is represented by the invariant subring 

where the action of /Xp2_i is given by 

t-xvH" = t'^+^'x {x G ^^Ei£2d, t G /Xp2_i(Fp)). 
Furthermore, the set of morphisms of Cq is represented by the algebra 

e e 

where the tensor products are formed using the idempotent ring homomorphism 

e: ''Ee£4u,u-^] — >^^E££^ 
obtained by averaging over the action of /Ltp2_i whose image is ^^E££^[u,u~^]'^p^-^ . 
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Theorem 9.1. There is a natural isomorphism of groupoids with G^-action, 

Moreover, Fp ® ^^^2^ can be identified with the set of continuous functions Cq — > ¥p of 
weight n and ^^T2n Q¥p<Si ^^'^2n with the subset of Galois invariant functions. 

The natural morphism of topological groupoids e: Seplsog^ — > Co is induced by the natural 
morphism of Hopf algebroids e: {^^EU^:[u,u~^Y'^'^-^ ,^^T/'^'^) — > {^^EU^:,^^T^) under which u 
goes to 1. Furthermore, e is an equivalence of topological groupoids. 

In the latter part of this resuh, the topological structure has to be taken into account when 
discussing equivalences of groupoids, with all the relevant maps required to be continuous. This 
fact will be used to prove some cohomological results in Section [TOl Notice that Hp2_i is an 
etale group scheme and e is an etale morphism. 

By Proposition 18.61 Seplsog^^g is connected, hence so are the quotient categories C and Cq. 
The following stronger result holds. 

Theorem 9.2. Let Eq be an object of either of these categories. Then there are continuous 
maps a : C — > Obj C, ao : Cq — > Obj Cq for which 

domcr(5) = dom(To(5) = £o, codom(T(5) = codom(To(5) = £. 

Hence there are splittings of topological categories 

C = Obj C X Autc £o, Co = Obj Co x Autco ^o- 

Proof. We verify this for C, the proof for Co being similar. Choose an object {£q,ujo) of C and 
set ao = jX-^o)- 

First note that for each a G Fp, the subcategory of Seplsog^^ consisting of objects {£,uj) 
with j(£) = a is either empty or forms a closed and open set Ua in the natural (Zariski) 
topology on the space of all such elliptic curves. In each of the non-empty sets Ua, we may pick 
an element {£a,uJa)- Then for each {£,uj) with j{£) = q, there is a non-unique isomorphism 
^(£,uj)' (,£a,'^a) — > i£,^) in Seplsog. Given a second such isomorphism cp', the composite 
ip~^oip' is in Aut £a- Passing to the quotient category C we see that the image of the subcategory 
generated by Ua is connected since all such isomorphisms ip have identical images. 

Now for every a with Ua non-empty, we may choose a separable isogeny 

ipa- {£o,UJo) > (<?a,u;Q,). 

Again, although this is not unique, on passing to the image set Ua in C we obtain a unique such 
morphism between the images in C. Forming the composite '^[s,uj) ° '■Pa and passing to C gives a 
continuous map Ua — > C with the desired properties, and then patching together these maps 
over the finitely many supersingular j-invariants for the prime p establishes the result. □ 

Corollary 9.3. There are equivalences of topological categories 

C~Autc5o, Co~Autc„£:o- 
Corollary 9.4. There is an equivalence of Hopf algebroids 

(k{2),,k{2),k{2)). 
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10. Some equivalences of Hope algebroids 

Now that we possess the machinery developed in Section [71 we are in a position to give some 
cohomological results. Om' goal is to reprove the following result of theorem 4.1]. 

Theorem 10.1. There is an equivalence of Hopf algebroids 

{EUJ{p,A),Eee^EU/{p,A)) {K{2)^,K{2)^K{2)), 

inducing an isomorphism 

^^t*iu^Eu(EU,,EU,/{p,A)) ^ Ext;^*2).x(2)(^(2)*>^(2)*)- 

First we will make use of a further result of Devinatz [18] . 

Proposition 10.2. The natural morphism of Hopf algebroids 

induces an isomorphism o/Ext groups. 

Proof. See the discussion of [18, Construction 2.7], in particular the remarks between equa- 
tions (2.8) and (2.9). □ 

By [Sni proposition 1.3d], we have 

Ext^« Eu{EU,,EUJ{p,A)) ^ Ext*:%r EU*,''EIQ 

^ Exti'^^ CEU^u, u-^'^'EeLlu, u~^]). 

By Theorem 19. 1[ there is an isomorphism 

Exti-;^ CEU^u, u-\''EU,[u, n-i]) 

^Ext*'% 2 , CE££4u,u-Y^^-\''EU4u,u-Yr>^-^). 

ssp P ~1 

Finally, by Corollarv 19.41 there is an isomorphism 



Ext*'% , , CEU4u,u-Yp'-^,''EU,[u,u-^fp^ 



K(2)(^(2)*>^(2)*)- 



11. ISOGENIES AND STABLE OPERATIONS IN SUPERSINGULAR ELLIPTIC COHOMOLOGY 

In this section we explain how the category Seplsog^ naturally provides a model for a large 
part of the stable operation algebra of supersingular elliptic cohomology ^^Ei£*( ). In fact, it 
turns out that the subalgebra ^^EltEU = EU* {EU) can be described as a subalgebra of the 

'twisted topologized category algebra' of Seplsog^g with coefficients in ^'^i?£^*[u, n^-*^]. Such a 
clear description is not available for Eii*Ei£ = EU* (Eii), although an analogous result for the 
stable operation algebra i^(l)*(£'(l)) is well known with the later being a twisted topological 
group algebra. More generally, Morava and his interpreters have given analogous descriptions 
of K{n)*{E{n)) for n^l. 

By [5], ^^Eii^: and '^^E£i^:[u,u^^] are products of 'graded fields', hence 

""""EitEU = Romss Eu,rEU4EU),^''EU^), 
'""EUiu, u-^]*EU = YloiassEu,y^,u-^^rEU[u, u-%{EU),^''EU^[u, 
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The set of all morphisms originating at a particular object = {£Q,iOo) of Seplsog^, with 
defined over ¥p (such curves always exist by Theorem lA.ip , is 

Sepl^g^, {£o,*)= U Se5l^g,x, {So, 8) , 

S_ isogenous 
to €q_ 

is noncanonically a product of the form 

SepIsog,x3(^, *) = ]J InvtHomB^^ {TpiEo / N) ,rp£o) x , 

where N ranges over the finite subgroups of £q of order prime to p. 

Using similar methods to those of [51 IH] we can construct stable operations T„ {p \ n) in 
the cohomology theory EU^\u,u~^]* [ ) and these actually restrict to operations in ^^E£il{ ). 
These operations (together with Adams-like operations originating on the factor of Fp) generate 
a Hecke-like algebra. 

There is also a further set of operations coming from elements of the component 

SepIsogs''s(^,^) = InvtHomiD)j,^(7^(£:o),7^£:o) x ^p"" ■ 

These operations correspond to the Hecke-like algebra of [8] associated to the Morava stabilizer 
group §2- 

Combining these two families of operations gives rise to a composite Hecke-like algebra 
which in turn generates subalgebras of the operation algebras in the cohomology theories 
^'Eie4u,u-^]*{ ) and ^""EUK ). 

12. Relationship with work of Robert 

In [35, Robert discussed the action of Hecke operators T„ {p \ n) on the ring of holomorphic 
modular forms modulo the supersingular ideal generated by p, A, in effect studying the action 

of the etale part of the category Seplsog^^. In this section we discuss connections between 
this work and ours. Serre [35] gave an adelic description of Hecke operators associated to 
supersingular elliptic curves which appears to have connections with our work. 

We begin with some comments on Robert's work which provides a classical Hecke operator 
perspective on ours. We denote by B: ^^Eii^ — > ^^EU^ the operator B(F) = BE, which raises 
weight by p -|- 1 and degree by 2{p + 1). The following operator commutativity formula holds 
for all primes p: 

(12.1) BT^ = ^T^B. 

This is actually a more general result than Robert proves since he only works with holomorphic 
modular forms, but our result of [9], discussed earlier in Theorem [321 gives in the ring ^^Eii^ 

and this allows us to localize with respect to powers of A or equivalently of B. 
Recall the Hecke algebra 

Hp = ¥p[Ti,ip^ : primes i 7^ p]/ (relations), 

where the relations are the usual ones satisfied by Hecke operations, as described in Theorem 7 
of [5]. We follow Robert in introducing certain twistings of a module M. For each natural 
number a let M[a] denote underlying Fp-module M with the twisted Hecke action 

Ti-m = T^^m = TT^m. 
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When F G ^^Ei£^, this agrees with Robert's action 

at least when restricted to the holomorphic part, and then M[a] = M[a+p — 1] as Hp-modules 
since = 1 mod (p). We view multiplication by B as giving rise to homomorphisms of graded 
Hp-modules B: ^^E£i^[a] — > ^^EUtf[a — 1] for a G Z, uniformly raising degrees by 2{p + 1). 

More generally, if is a right comodule over the Hopf algebroid {^^E££^,,^^T^^) with coproduct 
7: M — > M (g) '^'^r^, then associated to each a G Z there is a twisted comodule M^,[a] with 

coproduct 

i 

where ind is defined in Equation 15.11 (see also Proposition I5.2p and 7m = rrii^ti. 

Recall that for any left '^'^£'^£,,-linear map 6: ^^T^ — > ^^EU^, there is an operation 6 on M^, 
given by 

6m = rrii Cg) 0{ti). 

i 

By [5l [8] , this construction gives rise to an induced Hp-module structures on M^, and Af* [a] 
agreeing with that generalizing Robert's discussed above. In fact, these extend to module 
structures over the associated twisted Hecke algebra containing ^^Eii^, and Hp as discussed in 
[8] . Also there are homomorphisms B : M^, [a] — > M^, [a — 1] of modules over the twisted Hecke 
algebra and induced from multiplication by B. The following is our analogue of [33', lemme 6]. 

Theorem 12.1. For a G Z, B: M^,[a] — > M^,[a — 1] defines an isomorphism of {^^Eii^,,^^Tl)- 
comodules. 

Proof. We make use of the description of Eii^Ei£(^p'j from [6] and view modular forms as func- 
tions on the space of oriented lattices in C. As will see, the argument used by Robert to 
determine TgB for a prime £ ^ p is based on a congruence in Ell^^Ell^py 

By [33\ equation 19, theoreme B/lemme 7], we have the following. If for some r = 0, 1, . . . 

L=(r,l)c(rM>, r' = ^, q' = e^^'^' , 
then taking g-expansions over Z(p) gives 



l<k 



On the other hand, if 



then by taking g-expansions we obtain 
£P+^B{q') - B{q) = 



In the terminology of [B], the coefficient of each monomial q^{q'Y is a stably numerical poly- 
nomial in i. Indeed, using the integrality criterion of P, theorem 6.3] for generalized modular 
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forms to lie in Eii^Ei£(^p-j, together with the fact that every lattice inclusion of index not di- 
visible by p factors into a sequence of lattice inclusions of prime index, we can obtain similar 
formute for all lattice inclusions of (not necessarily prime) index not divisible by p. 

The precise interpretation of what is going on here is that there are functions Fo,Fi E 
E£i^E£i(^p) on inclusions of lattices such that for any inclusion of lattices L C L' of degree 
[L'; L] not divisible by p, 

(12.2) B{L') - [L'-L]B{L) = pFo{L C L') + A{L)Fi{L C L'). 
It follows from this that in the ring EU^Ei£(^p-^, 

(12.3) 7]RiB)-r]LiB)md 
Notice that under the reduction map E££^E££(^p^ 

{L C L') ^ 

is sent to ind. This can be seen as follows. For any supersingular elliptic curve £ defined over 
¥p2 there is an imaginary quadratic number field K in which p is unramified and so there is a 
lift a of j{£) contained in the ring of integers Ok- Then there is an elliptic curve £ defined 
over Ok with j(£) = a and reduction modulo p induces an isomorphism £[n] — > £[n] for p\ n. 
Since a strict (hence separable) isogeny : £ — > £' of degree n, and defined over an extension 
of Fp2 is determined by kenp C £[n], it can be lifted to a strict isogeny ip: £ — > £' of degree n 
and defined over some extension of Ok, where ker^ is the preimage of kei under reduction. 
Then indf = n mod (p). Hence if we express £ in the form C/L, £' can be realized as C/L' 
where L <^ L' has index n. 

Because ind^^^ = ci (the constant function taking value 1), we have 

(12.4) m{BP~^) - Vl{BP-^) = mod {p, Ai), 

which implies that B^~^ G ^^E£i^ is coaction primitive. 
By Equation ()12.2p . we have 

7B(m) = 7(mi?) = ^ rrii U-qjiB 

i 

= rui (8) Bti ind 

i 

= niiB ti ind 

i 

= B(mj) ti ind 

i 

= B7Wm, 

where we have viewed M^, as a right ^^E££^:-module and used ^^i^^^^-bimodule tensor products. 

The determination of TiB now follows from our definition of the Hecke operators of [Gj 
equation 6.5], as does the generalization of Robert's formula 

Te(BF) = £BTe{F), 

which holds for F £ ^^E££^, and primes £ ^ p. □ 

Our results are more general than those of Robert since they involve generalized isogenies 
rather than just isogenies to define ^'^E'^^^-linear maps '^T^ — > Fp and hence operations Tp 

28 



mod (p, Ai 

^ ss"pO 



r|^, the index function 



[L';L] 



on ^^r^-comodules. Explicit operations of this type were defined in [8] using Hecke operators 
derived from the space of double cosets 

and its associated Hecke algebra; in fact this space is homeomorphic to §2 ^ Z/2 as a space. For 
each supersingular elliptic curve {£,lli) we can identify W(Fp2) (S) with Isog((<S, cj), {£,uj)) and 
as in [S] obtain for each a S §2 xi an ^^E£i^,-lmeax map a^, : ^^F^ — > ^^EU^, and hence an 
operation a on '^^F^-comodules. This can be further generalized by associating to each positive 
integer d and each separable isogeny {£,io) {£',io') of degree d, the corresponding element 
a'^ £ Isog((i5, w), {£',io')) and then symmetrizing over all of these to form a '^'^£'^£*-linear map 

Robert analyzes the holomorphic part of ^^EU2n as a Hp-module, in particular he determines 
when the Eisenstein modules Ei^ embed, where Ei^ is the 1-dimensional Fp-module on the 
generator ek for which 

TiCk = {1 + £''-')ek. 

Thus Eifc is an eigenspace for each Hecke operator Tg, and there is an isomorphism of Hp- 
modules 

Ei2fc = Fp{£'2A,.} C ^^Eil^k] e2k ' — > E2k, 
where E2k is the reduction of one of the following elements of {E££2k){p)- 

E2k if (P - 1) I 2k, 
{B2k/^k)E2k if (P - 1) t 2k. 
In particular, Eio is the 'trivial' module for which 

T^eo = (l + ri)eo. 

Robert gives conditions on when there is an occurrence of Ei^ in ^^E££2n, at least in the holomor- 
phic part. Since localization with respect to powers of A is equivalent to that with respect to 
powers of B by the main result of [9] we can equally well apply his results to ^^E££2n, obtaining 
the following version of [33 1 theoreme 3]. 

Theorem 12.2. For a prime p ^ 5 and an even integer k, there is an embedding ofHp-modules 
Eifc — > ^^E££2n if and only if one of the following congruences holds: 

n = k mod {p"^ — n = pk mod (p'^ — 1). 

Notice that in particular, the trivial module Eig occurs precisely in degrees 2n for which 
(p^ — 1) I 2n. The Ext groups of ^^E££^ over ^^F^ were investigated in [11^ llOj. and the results 
show that Robert's conditions are weaker than needed to calculate Ext*^. Of course, his work 

ignores the effect of operations coming from the 'connected' part of Seplsog^. 

Appendix A. Supersingular curves defined over Fp 

For every prime p > 3 with p ^ 1 mod (12) there are supersingular elliptic curves defined 
over Fp since the Hasse invariant then has Q or ii as a factor. The following stronger result 
which seems to be due to Deuring is also true and a sketch proof can be found in Cox [TB] 
also contains an accessible account of related material. 
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Let £ he a supersingular elliptic curve over Fp whose j-invariant is = mod (p) or 
1728 mod (p). Recall that the endomorphism ring EndiS contains an imaginary quadratic num- 
ber ring of the form 

fzM a = Omod {p), 

if jX-f) = 1728 mod (p). 
By Theorem [131 such elliptic curves are isomorphic to WeierstraB curves defined over Fp. 
Let K = Q(\/— p) and Ok be its ring of integers which is its unique maximal order. 

Theorem A.l. For any prime p > 11, there are supersingular elliptic curves E defined over 
Fp with j{£) ^ 0, 1728 mod (p) and Or Q EndS. 
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